Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Server signed Actor Delete activities #30339

Open
mediaformat opened this issue May 17, 2024 · 3 comments
Open

Server signed Actor Delete activities #30339

mediaformat opened this issue May 17, 2024 · 3 comments
Labels
suggestion Feature suggestion

Comments

@mediaformat
Copy link

mediaformat commented May 17, 2024

Pitch

Allow Actor Delete activities to be signed by an Instance actor

the Delete activity may be signed by the remote server's Instance actor instead of the actor itself.

https://swicg.github.io/activitypub-http-signature/#handling-deletes-of-actors

Motivation

Allowing an Application actor to sign & send Actor Delete activities, the sending server could potentially group deleted Actors in the object thereby reducing some of the chatter this activity causes.

The receiving server could verify that the Actor(s) has indeed been Deleted, resulting in 404 or 410.

See:

@mediaformat mediaformat added the suggestion Feature suggestion label May 17, 2024
@trwnh
Copy link
Member

trwnh commented May 17, 2024

One problem is that there is no indication that any given actor has the authority to delete another, different actor. You could get around this by saying that every actor is attributedTo the server (or some actor representing it), but on its own, a Delete is only valid if its object is owned by the actor.

@mediaformat
Copy link
Author

mediaformat commented May 17, 2024

What about if the actor was somehow designated as such, for example in node-info, or some other server authoritative way?

@mediaformat
Copy link
Author

mediaformat commented May 17, 2024

There is already extensive discussion re: FEP-2677 seeking to formalize this very thing!

Also a draft PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
suggestion Feature suggestion
Projects
None yet
Development

No branches or pull requests

2 participants